Chapter 4

Configuration via the Command Line Interface

4.6.3 Set the Network Descriptor Parameters

modify command The ipsec connection network modify command sets or modifies the Network Descriptor parameters.

Example In this example, the parameters of the previously defined network, named net1, are set:

[ipsec

connection network]=>

[ipsec

connection network]=>modify

name =

net1

[type] =

subnet

range

address

[type] = subnet

 

 

[ip] = 10.0.0.0/24

 

 

[proto] =

egp

esp

ah

ggp

gre

hmp

icmp

igmp

pup

rdp

rsvp

tcp

udp

vines

xns-idp

6to4

 

 

[proto] =

 

 

[port] =

at-nbp

at-rtmp

at-echo

at-zis

auth

bgp

biff

bootpc

bootps

chargen

clearcase

daytime

discard

dns

domain

doom

echo

exec

finger

ftp

...

[port] =

 

 

:IPSec connection network modify name=net1 [ipsec connection network]=>

In the example above, the network is defined as an IP subnet 10.0.0.0/24. No protocol or port number are selected. The TAB key was used to show the supported entries for the proto and port parameters.

Use the list command to verify the results of the operation:

[ipsec connection network]=>list [net1] : subnet 10.0.0.0/24

[ipsec connection network]=>

E-DOC-CTC-20051017-0169 v0.1

139

 

Page 141
Image 141
Nortel Networks 608(WL), 620 manual Set the Network Descriptor Parameters, Net1